
U.C. BERKELEY TIMELINE (PST) 


%iffiii[NOV2 

1900 

BERKELEY HIT 


2028 

PETER YEE'S MESSAGE 


2100 

SENDMAIL, FINGERD, ETC. 

SHUT OFF LOCALLY 

THU NOV 3 

0100 

SENDMAIL BUG FIXED 


0300 

SENDMAIL BUG POSTED TO'l-CP IP, USENET 


0500 

FINGERD BUG - ED WANG 


1700 

FINGERD BUG 

DECOMPILATION STARTS 


2100 

FINGERD POSTED 

FRI NOV4 

0600 

DECOMPILATION "IINISiED" 

MON NOV 7 

1900 

(DITTO) 


HOST CLEANUP 


1. FIX SENDMAIL-DISABLE "DEBUG" COMMAND 

2 . FIX/DISABLE FINGERD (REPLACE GETS WITH FGETS) 

3. DISALLOW FBH FROM INFECTED HOSTS 
-DISABLE RSHD 

-RENAME USERS' RHOSTS FILES AND VEFUFY EQUIVALENT HOSTS ARE CLEAN 

4. REMOVEWORMS FROM MAIL QUEUE 

5. KILL RUNNING WORMS (OR REBOOT) 

(SH) 

Om-91*) 

RSH HOSTNAME EXEC/BIN/SH 

6. USERS WHOSE ACCOUNTS WERE BROKEN - CHANGE PASSWOFJDS 
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